Comment by drtz

2 hours ago

Yeah it's bad, but AI isn't required for this type of thing to work.

My anecdotal experience is my Facebook account was compromised several years ago after TOTP 2FA was disabled. Didn't exactly give me a warm fuzzy about Facebook security policies at the time, and this new attack just reaffirms that.